Privacy Policy
Last updated: April 2026
This privacy policy explains how Amy Garratt trading as AG Injury Rehabilitation (“we”, “us”, “our”) collects, uses, stores and protects your personal data. It applies to all data collected through this website (ag-injury-rehabilitation.co.uk), through our online booking system, and through direct contact with the clinic.
We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Controller: Amy Garratt
Trading as: AG Injury Rehabilitation
Address: 15 Norfolk St, Newtown, Wigan, WN5 9BJ
Email: [email protected]
1. What Data We Collect
Contact and identity data
Name, email address, telephone number and postal address.
Health and clinical data (special category data)
Information about your injury, medical history, current medications, previous treatment, and clinical notes recorded during and after appointments. This data is handled with the additional care required under UK GDPR.
Booking and appointment data
Appointment dates, times, appointment types, payment records and related correspondence.
Website usage data
IP address, browser type, pages visited and referral sources, collected via cookies and analytics tools.
Communication data
Any information you provide when contacting us by email, telephone or via the contact form on this website.
2. How We Collect Your Data
- When you complete a contact or booking form on this website
- When you book an appointment through our online booking system (Rehab Guru)
- When you attend the clinic and complete a patient intake form
- When you communicate with us by email or telephone
- Automatically through cookies and analytics tools when you visit this website
3. Lawful Basis for Processing
Contract: To provide the services you have booked and to manage your appointments and treatment.
Legitimate interests: To communicate with you about your appointments and to manage and improve our services, where your interests do not override ours.
Legal obligation: Where we are required to retain or disclose data by law.
Consent: For any marketing communications. You may withdraw consent at any time by contacting us.
For special category health data, we process on the basis of providing healthcare treatment (Article 9(2)(h) UK GDPR) and, where relevant, your explicit consent.
4. How We Use Your Data
- To book, confirm and manage your appointments
- To provide clinical assessment and rehabilitation treatment
- To maintain clinical records as required by professional standards
- To communicate with you about your appointments and care
- To process payments
- To respond to your enquiries
- To comply with our legal and regulatory obligations
- To improve our website and services
We will not use your data for automated decision-making or profiling.
5. Who We Share Your Data With
We do not sell or rent your personal data to any third party. We may share your data with the following parties where necessary:
Rehab Guru: Our online booking and practice management platform, who process data on our behalf as a data processor.
Payment processors: Where card payments are taken. We do not store card details ourselves.
Professional advisors: Solicitors, accountants or insurers where necessary for the conduct of our business.
Regulatory or legal authorities: Where we are required to disclose information by law.
Other healthcare providers: Only where you have consented or where it is in your vital interest, for example where a referral is in your best clinical interest.
We will not transfer your personal data outside the UK without ensuring appropriate safeguards are in place.
6. How Long We Keep Your Data
Clinical records: A minimum of 8 years from the date of last treatment. For patients who were minors at the time of treatment, records are retained until age 25 or 8 years from last treatment, whichever is later.
Contact and enquiry data: Up to 2 years from last contact if you did not proceed to treatment.
Booking and payment data: 7 years for financial records, in line with HMRC requirements.
After these periods, data is securely deleted or anonymised.
7. Cookies
This website uses cookies — small text files stored on your device when you visit a website. We use essential cookies (required for the site to function) and analytics cookies (to understand how visitors use our site). You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of this website.
8. Your Rights Under UK GDPR
You have the following rights in relation to your personal data:
- Right to be informed — to know how we use your data
- Right of access — to request a copy of the personal data we hold about you
- Right to rectification — to have inaccurate data corrected
- Right to erasure — to request deletion of your data, subject to our legal obligations
- Right to restrict processing — to ask us to limit how we use your data
- Right to data portability — to receive your data in a machine-readable format where applicable
- Right to object — to object to processing based on legitimate interests
To exercise any of these rights, please contact us at [email protected]. We will respond within one calendar month.
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.
9. Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or alteration. In the event of a data breach likely to result in risk to your rights and freedoms, we will notify the ICO within 72 hours and inform affected individuals where required.
10. Changes to This Policy
We may update this privacy policy from time to time. The current version will always be available on this website.
11. Contact Us
Amy Garratt
AG Injury Rehabilitation
15 Norfolk St, Newtown, Wigan, WN5 9BJ
Email: [email protected]
Telephone: 0748 201 5552